Network Security Engineer (Banking Domain)

Job Description:

The role requires a hybrid skillset across operations, implementation, and advanced troubleshooting, with exposure to banking/fin-techs or technology-driven environments. The candidate will act as a technical escalation point for L1/ L2, and work with Engineering and operations teams, ensuring stable, secure, and scalable network operations.

Roles & Responsibilities:

• Administer, Monitor, maintain and optimize WAN, LAN, Wi-Fi networks for optimal performance and maximum availability.
• Troubleshoot complex incidents (latency, packet drops, DNS issues, firewall policies, VPN instability).
• Perform WAN/LAN/Wi-Fi/Firewall/Load balancer configuration, backups, and regular network documentation updates.
• Collaborate with regional team on the design and implementation of new technical solutions.
• Troubleshoot and optimize WAN circuits with upstream provider.
• Manage and coordinate the administration of several systems
• Visit to sites and regional Data Centres carry on the tasks as required.
• Assist with security and third-party software installations.
• Communicate and liaise with all company departments; notify appropriate parties immediately of any issues which may affect efficient operations including, but not limited to, outages, service disruptions, and network bottlenecks.
• Maximizes network performance by monitoring performance; troubleshooting network problems and outages; scheduling upgrades; collaborating with network architects for network optimization.
• Secure network system by establishing and enforcing policies; defining and monitoring access.
• Take an automated data driven approach to diagnosing and solving complex network infrastructure issues.
• Leverage on automation skills and take a "dev ops" approach to improve efficiency of solving complex network infrastructure issues, network management.
• Capacity Planning: Perform ongoing network performance monitoring and capacity planning to handle current and future data demands.
• Security Compliance: Collaborate with security teams to ensure networks are designed and implemented with security best practices, regulatory compliance (e.g., GDPR, HIPAA), and threat mitigation in mind.
• Documentation and Standards: Develop and maintain documentation for network architecture, including diagrams, configuration guides, and operational procedures.
• Cross-Department Collaboration: Partner with application, cloud, and infrastructure teams to optimize overall system performance and deliver integrated solutions.
• Troubleshooting: Support for diagnosing, troubleshooting, and resolving complex network issues, ensuring business continuity.
  

Technical Requirements:

• Networking Protocols: Expertise in IP networking protocols (e.g., BGP, EIGRP, OSPF, MPLS, VLANs, IPsec, TCP/IP, QoS) and related technologies.
• Network Security Technologies: Proficient in network security technologies like firewalls, VPNs, IDS/IPS, Load-balancers: F5 BIG-IP / AVI LB, Web proxy’s; DDI Enterprise – DNS, DHCP, NTP, IPAM
• Security: Understanding of Network Segmentation in DMZ/ Perimeter networks, Zero Trust concepts, Cloud based DDOS/WAF capabilities.
• Network Monitoring: Familiarity with network monitoring tools (e.g., SolarWinds, Netscout, Wireshark) for performance and anomaly detection.
• Data Centre Architecture: In-depth understanding of data centre networking (e.g., spine-leaf, fabric architectures) and cloud connectivity.
• Cloud Networking: Good to have exposure, with basic understanding on various cloud-to-on-prem deployments like hybrid connectivity (VPN/Direct-Connect/Express-route)
• Network Automation: Knowledge of network automation tools (e.g., Ansible, Python scripting, Terraform) to automate configuration, deployment, and management processes.

Job Requirements:

• Experience: 8-12 years of experience in networking in domains such as data networks, security, FW, Proxy, LB, Voice, etc.,
  Demonstrated ability to lead cross-functional teams and communicate complex technical concepts to both technical and non-technical stakeholders.
• Proven track record of innovative problem-solving and ability to troubleshoot complex network systems.

Educational Requirements:

• Bachelor’s Degree: Degree in Computer Science, Information Technology, Network Engineering, or a related field is required.
• CCNA / CCNP or related professional certification is preferred.
• Firewall vendor certification (Fortinet NSE / Palo / Check Point) is good to have.